autonomy bundle

Manage AutonomyOps bundles (pull, push, inspect, verify)

Synopsis

Commands for the full AutonomyOps bundle lifecycle: fetch, publish, inspect, and verify bundle artifacts in OCI registries.

A bundle encapsulates a policy, optional model weights, and a runtime configuration into a single versioned OCI artifact.

Typical operator workflow: autonomy bundle push ./robot.tar registry/robot-behavior:v1 autonomy bundle verify registry/robot-behavior:v1 –pub-key ./cosign.pub autonomy bundle pull registry/robot-behavior:v1 –out ./robot.tar autonomy bundle inspect registry/robot-behavior:v1

Subcommands

• autonomy bundle inspect — Display manifest metadata for a bundle

• autonomy bundle pull — Pull a bundle artifact from an OCI registry

• autonomy bundle push — Push a bundle tarball to an OCI registry

• autonomy bundle stage — Stage a bundle tarball to the local bundle store (air-gapped)

• autonomy bundle verify — Verify supply-chain integrity of a bundle (cosign + BLAKE3)